From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: rost.bel@gmail.com Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 75b0a7c3 for ; Sun, 30 Apr 2017 14:44:07 +0000 (UTC) Received: from mail-lf0-f49.google.com (mail-lf0-f49.google.com [209.85.215.49]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id e2040302 for ; Sun, 30 Apr 2017 14:44:07 +0000 (UTC) Received: by mail-lf0-f49.google.com with SMTP id c80so52560307lfh.3 for ; Sun, 30 Apr 2017 07:53:24 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: References: From: Rostislav Belotserkovski Date: Sun, 30 Apr 2017 17:53:03 +0300 Message-ID: Subject: Re: do a client behind NAT needs to define listening port? To: "Jason A. Donenfeld" Content-Type: multipart/alternative; boundary=f403045fc0f8e55de7054e6377a3 Cc: WireGuard mailing list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , --f403045fc0f8e55de7054e6377a3 Content-Type: text/plain; charset=UTF-8 I understand your example, but then another question is up - if we don't specify PersistentKeepalive on one of the sides, after a while both client and server become silent, and session effectively ends by routers udp timeout (30 sec on mine), and if server needs to talk to a client which is behind NAT w/o listening port forwarded, it will fail, right? On Sun, 30 Apr 2017 at 15:35 Jason A. Donenfeld wrote: > If you're the client, you're already connecting _up_ to a server, > which means ordinary stateful NAT takes care of that. > > Comparison: do you manually specify a source port when making an > outgoing HTTP connection? > --f403045fc0f8e55de7054e6377a3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I understand your example, but then another question = is up - if we don't specify=C2=A0PersistentKeepalive on one of the side= s, after a while both client and server become silent, and session effectiv= ely ends by routers udp timeout (30 sec on mine), and if server needs to ta= lk to a client which is behind NAT w/o listening port forwarded, it will fa= il, right?

On Sun, 30 Apr 201= 7 at 15:35 Jason A. Donenfeld <Jason@zx2c4.com> wrote:
If you're the client, you're already con= necting _up_ to a server,
which means ordinary stateful NAT takes care of that.

Comparison: do you manually specify a source port when making an
outgoing HTTP connection?
--f403045fc0f8e55de7054e6377a3--